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TITLE OF THE INVENTION 
IMAGE SENSING APPARATUS AND 
METHOD OF CONTROLLING THE SAME 

FIELD OF THE INVENTION 

The present invention relates to an image sensing 
apparatus which notifies a user of information 
concerning an image file. 

BACKGROUND OF THE INVENTION 

Recent digital ccuneras can display, on a display 
device, information concerning image files in a 
removable memory. 

Unfortunately, none of these recent digital 
cameras can notify a user whether each image file in 
the removable memory has authentication data. 
Therefore, even an image file having authentication 
data is erased by mistake. Note that authentication 
data is data necessary to a process of authenticating 
whether image data in an image file is altered. 

Also, no recent digital cameras are designed by 
taking account of how to display, on a limited screen, 
information indicating whether an image file has 
authentication data . 

SUMMARY OF THE INVENTION 

The present invention has been made to solve the 
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above problems, and has as its object to notify a user 
whether an image file has authentication data. 

An image sensing apparatus of the present 
invention comprises determining unit adapted to 
5 determine whether an image file has authentication data, 
and display unit adapted to display, in a predetermined 
area, information indicating that the image file has 
authentication data, if the image file has 
authentication data . 

10 Other features and advantages of the present 

invention will be apparent from the following 
description taken in conjunction with the accompanying 
drawings, in which like reference characters designate 
the same or similar parts throughout the figures 

15 thereof. 

BRIEF DESCRIPTION OF THE DRAWINGS 
Fig. 1 is a block diagram showing the main 
components of an image sensing apparatus according to 
the first and second embodiments; 

Fig. 2 is a flow chart showing a procedure in a 
one -image display mode; 

Fig. 3 is a flow chart showing a procedure in a 
nine -image display mode; 

Figs. 4A, 4B, and 4C are views showing an example 
of an image displayed in the one-image display mode, an 
example of an image displayed in the nine -image display 
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mode, and an example of mark 1 displayed in area X, 
respectively ; 

Fig. 5 is a flow chart showing a processing 
sequence in the one-image display mode; 
5 Fig. 6 is a flow chart showing a processing 

sequence in the nine-image display mode; 

Figs . 7A and 7B are views showing an example of 
an image displayed in the one-image display mode, and 
an example of an image displayed in the nine- image 
10 display mode, respectively, and Figs. 7C, 7D, and 7E 
are views showing examples of marks 2, 3, and 4, 
respectively, displayed in area X; 

Fig. 8 is a view showing the file format of an 
image file having authentication data; 
15 Fig. 9 is a block diagram showing the major 

components of an image sensing apparatus 1010 according 
to the third embodiment; 

Fig. 10 is a flow chart showing part of a 
processing sequence performed by the image sensing 
20 apparatus 1010 according to the third embodiment; and 

Fig. 11 is a flow chart showing part of the 
processing sequence performed by the image sensing 
apparatus 1010 according to the third embodiment. 

25 DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

( First Embodiment ) 

The first embodiment of the present invention 
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will be described below with reference to Figs. 1 to 4C. 

Fig. 1 is a block diagram showing the main 
components of an image sensing apparatus 10 according 
to this embodiment . The image sensing apparatus 10 is 
5 an apparatus (e.g., a digital camera, a scanner, a 
copying machine, or a portable information terminal 
with a digital camera) having a function of sensing an 
image by an image sensor. In the first embodiment, the 
image sensing apparatus 10 will be explained by taking 

10 a digital camera as an example in order to simplify the 
explanation . 

Referring to Fig. 1, an image sensing unit 101 
generates image data of an image sensed by an image 
sensor. An image sensing controller 102 is a unit for 

15 controlling the operation of the image sensing unit 101 
in accordance with instructions from a main controller 
110. The image sensing controller 102 controls 
focusing, aperture, and zoom. The image sensing 
controller 102 provides the main controller 110 with 

20 information pertaining to the image data generated by 
the image sensing unit 101. An image processor 103 
adjusts the image quality of the image data obtained 
from the image sensing unit 101 in accordance with a 
plurality of preset image adjusting parameters, and 

25 compresses the adjusted image data in accordance with a 
predetermined image compressing scheme (e.g., JPEG 
coding) . A memory 104 stores various data. 
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A memory Interface 105 writes an Image file 
designated by the main controller 110 in a removable 
memory 106, and reads out an image file designated by 
the main controller 110 from the removable memory 106. 
5 The removable memory 106 can store a plurality of image 
files . 

A network interface 107 transmits an image file 
designated by the main controller 110 to an external 
apparatus 108. The external apparatus 108 is an 

10 apparatus in which an application program for remotely 
controlling the image sensing apparatus 10, an 
application program for adjusting the image quality of 
image data in accordance with a plurality of image 
adjusting parameters, and the like are installed. For 

15 example, the external apparatus 108 is a personal 
computer. 

A display unit 109 displays reduced image data of 
an image sensed by the image sensing unit 101, reduced 
image data of an image file read out from the removable 

20 memory 106, and the like. The display unit 109 also 
displays information pertaining to a selected image. 

The main controller 110 controls various 
functions of the image sensing apparatus 10. Also, the 
main controller 110 executes an authentication data 

25 generation process, image file generation process, 
image protecting process, and the like. The 
authentication data generation process is to generate 
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authentication data of image data obtained from the 
image processor 103, by using the hash value of the 
image data and key data (equivalent to a secret key in 
a secret key cryptographic system or a private key in a 
5 public key cryptographic system) . The authentication 
data is necessary for a process of authenticating 
whether image data is altered. The image file 
generation process is to generate an image file 
containing image data and its authentication data. The 
10 image protecting process is to add, to an image file, 
information for preventing erasure from the removable 
memory 106 . 

Fig. 8 shows an example of the file format of an 
image file stored in the removable memory 106. An 

15 image file is made up of a header, body, and footer. 
However, an image which is sensed while an alteration 
preventing function is nullified has no authentication 
data, or has no authentication data storage area in the 
footer. The header contains the file name, camera ID 

20 information for specifying a digital camera used in 
image sensing, and a thumbnail image. "Other 
information" includes information such as the image 
size (the numbers of pixels in the horizontal and 
vertical directions), the start position and size of 

25 the body, and the start position and size of the footer. 
The body stores compression-coded image data (e.g., 
JPEG encoded image data) . "Marker" in the footer is 
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information concerning the type of authentication data. 
If no authentication data is added to an image file, 
this image file has no marker. With this structure, it 
is possible by checking the footer to determine whether 
authentication data is added to the image file. Note 
that the marker and authentication data can also be 
stored in the header, instead of the footer. 

An image switching dial 111 switches reduced 
image data to be displayed in a selection area of the 
display unit 109. A display button 112 switches image 
display modes of the image sensing apparatus 10. The 
image sensing apparatus 10 has two image display modes, 
i.e., a one -image display mode and nine -image display 
mode. In the one -image display mode, one reduced image 
data read out from the removable memory 106 is 
displayed, and information concerning image data 
corresponding to the reduced image data is displayed. 
In the nine-image display mode, nine reduced image data 
read out from the removable memory 106 are displayed in 
a matrix manner (3X3 in this embodiment , but any 
other matrix is of course also possible), and 
information concerning image data corresponding to 
reduced image data in the selection area is displayed. 

Reference numeral 113 denotes a button for 
designating the start of image sensing; and 114, a 
button for switching addition/no addition (ON/OFF) of 
authentication data. The state information is stored 
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in a predetermined area of the memory 104. For exeunple, 
if the button 114 is switched to designate addition of 
authentication data, authentication data is added to 
image data obtained by image sensing after that, when 
5 the image data is stored in the removable memory 106. 
Accordingly, if the button 114 is switched to designate 
no addition of authentication data, i.e., if the button 
114 is switched to OFF, image data is stored without 
adding any authentication data to it . Note that the 

10 apparatus further comprises buttons and cursor buttons 
for selecting a displayed image, in addition to the 
above buttons. 

Fig. 4 A is a view showing an example of an image 
displayed by the display unit 109 when the image 

15 display mode is the one -image display mode. Area 0 

displays reduced image data read out from the removable 
memory 106. Area A displays information pertaining to 
image data corresponding to the reduced image data in 
area 0 as a selection area. Area X in area A displays 

20 mark 1 shown in Fig. 4C (mark 1 is displayed or not 
displayed in accordance with whether authentication 
data is added) . 

Fig. 4B is a view showing an example of an image 
displayed by the display unit 109 when the image 

25 display mode is the nine -image display mode. Areas 0 
to 8 display reduced image data read out from the 
removable memory 106. Area A displays information 
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pertaining to image data corresponding to reduced image 
data in a selection area (in the first embodiment, area 
0). Area X in area A displays mark 1 shown in Fig. 4C. 
Mark 1 is displayed/not displayed in accordance with 
5 whether authentication data is added to a selected one 
of the nine images (slow forward/reverse, next nine 
images , and previous nine images can be selected by 
buttons (not shown) or key operations). 

As described above, mark 1 shown in Fig. 4C is 

10 information for notifying a user that an image file 
corresponding to reduced image data in the selection 
area is an image file with authentication data. An 
"image file with authentication data" is an image file 
to which authentication data obtained from image data 

15 in the image file is added. 

In the first embodiment, to realize a 
user- friendly user interface, areas A and X in Fig. 4 A 
and areas A and X in Fig. 4B are displayed in the same 
positions. Also, to switch the image display mode from 

20 the one -image display mode (Fig. 4A) to the nine -image 
display mode (Fig. 4B) , reduced image data in area 0 
shown in Fig. 4A is displayed in the selection area 
shown in Fig. 4B. Similarly, to switch the image 
display mode from the nine -image display mode to the 

25 one -image display mode, reduced image data in the 

selection area shown in Fig. 4B is displayed in area 0 
shown in Fig. 4A. With this arrangement, even when the 



- 9 - 



CFM03238/P203-0378 



Image display mode is switched from the one -image 
display mode to the nine -image display mode or vice 
versa, the positions of areas A and X do not move, so 
information displayed in areas A and X remain unchanged. 
That is, the area for displaying mark 1 remains 
unchanged even when the image display modes are 
switched. 

Fig. 2 is a flow chart showing a processing 
sequence executed when the image display mode is 
switched from the nine -image display mode to the 
one -image display mode. 

Step S201: The memory interface 105 reads out 
from the removable memory 106 an image file 
corresponding to reduced image data to be displayed in 
area 0 as the selection area, and writes the readout 
image file in the memory 104. 

Step S202: The main controller 110 analyzes the 
image file written in the memory 104, and determines 
whether authentication data is added to the image file. 
If authentication data is added, the flow advances to 
step S203; if not, the flow advances to step S204. 

Step S203: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area 0. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area 0 has authentication data, the main controller 
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110 displays mark 1 shown in Fig. 4C in area X shown in 
Fig. 4A. 

Step S204: The main controller 110 reads out 
reduced image data from the image file written in the 
5 memory 104, and displays the readout reduced image data 
in area 0. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area 0 has no authentication data, the main 
controller 110 displays nothing in area X shown in 

10 Fig. 4A. 

Fig. 3 is a flow chart showing a processing 
sequence executed when the image display mode is 
switched from the one -image display mode to the 
nine -image display mode. 

15 Step S301: The main controller 110 sets n = 0. 

Step S302: The memory interface 105 reads out an 
image file corresponding to reduced image data to be 
displayed in area n from the removable memory 106, and 
writes the readout image file in the memory 104. 

20 Step S303: The main controller 110 determines 

whether area n is the selection area. If area n is the 
selection area, the flow advances to step S304; if not, 
the flow advances to step S309. 

Step S304: The main controller 110 analyzes the 

25 image file written in the memory 104, and determines 

whether authentication data is added to the image file. 
If authentication data is added, the flow advances to 
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Step S305; if not, the flow advances to step S306. 

Step S305: The main controller 110 reads out 
reduced Image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n has authentication data, the main controller 
110 displays mark 1 shown in Fig. 4C in area X shown in 
Fig, 4B. 

Step S306: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n has no authentication data, the main 
controller 110 displays nothing in area X shown in 
Fig. 4B. 

As described above, the image sensing apparatus 
10 according to the first embodiment can display mark 1 
and hence can notify the user whether image file has 
authentication data . 

Also, the image sensing apparatus 10 according to 
the first embodiment can display mark 1 in the same 
place (area X) even when the image display modes are 
switched. Therefore, the user can recognize only by 
checking area X whether an image file has 
authentication data. 
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(Second Embodiment) 

The second embodiment of the present invention 
will be described below with reference to Figs . 1 and 5 
to 7E. 

The second embodiment is an image sensing 
apparatus which determines whether an image file 
corresponding to selected reduced image data has 
authentication data, determines whether the image file 
is protected, and displays information (marks 2, 3, and 
4) indicating the determination results in the same 
place (area X). 

Fig. 7A is a view showing an example of an image 
displayed by a display unit 109 when an image display 
mode is a one-image display mode. Area 0 displays 
reduced image data read out from a removable memory 106. 
Area A displays information concerning image data 
corresponding to reduced image data in a selection area 
(i.e. , area 0 ) . Area X in area A displays mark 2 , 3 , 
or 4 shown in Fig. 7C, 7D, or 7E, respectively. 

Fig. 7B is a view showing an example of an image 
displayed by the display unit 109 when the image 
display mode is a nine -image display mode. Areas 0 to 
8 display reduced image data read out from the 
removable memory 106 . Area A displays information 

* 

concerning image data corresponding to reduced image 
data in a selection area (as in the first embodiment, 
area 0 ) . Area X in area A displays mark 2 , 3 , or 4 
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Shown in Fig. 7C, 7D, or 7E. 

Mark 2 shown in Fig. 7C is information for 
notifying a user that an image file corresponding to 
reduced image data in the selection area has 
authentication data and is protected. Mark 3 shown in 
Fig. 7D is information for notifying a user that an 
image file corresponding to reduced image data in the 
selection area is protected but has no authentication 
data. Mark 4 shown in Fig. 7E is information for 
notifying a user that an image file corresponding to 
reduced image data in the selection area has 
authentication data but is not protected. A "protected 
image file" is an image file whose erasure from the 
removable memojry 106 is prevented. 

In the second embodiment , to realize a 
user-friendly user interface, areas A and X in Fig. 7A 
and areas A and X in Fig. 7B are displayed in the same 
positions. Also, to switch the image display mode from 
the one -image display mode to the nine -image display 
mode, reduced image data in area 0 shown in Fig. 7A is 
displayed in the selection area shown in Fig. 7B. 
Similarly, to switch the image display mode from the 
nine-image display mode to the one-image display mode, 
reduced image data in the selection area shown in 
Fig. 7B is displayed in area 0 shown in Fig. 7A. With 
this arrangement, even when the image display mode is 
switched from the one -image display mode to the 
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nine -image display mode or vice versa, the positions of 
areas A and X do not move, so information displayed in 
areas A and X remain unchanged. That is, the area for 
displaying marks 2 , 3 , and 4 remains unchanged even 
5 when the image display modes are switched. 

Fig. 5 is a flow chart showing a processing 
sequence executed when the image display mode is 
switched from the nine -image display mode to the 
one-image display mode. 
10 Step S501: The memory interface 105 reads out an 

image file corresponding to reduced image data to be 
displayed in area 0 as the selection area, and writes 
the readout image file in the memory 104. 

Step S502: The main controller 110 analyzes the 
15 image file written in the memory 104, and determines 

whether the image file is protected. If the image file 
is protected, the flow advances to step S503; if not, 
the flow advances to step S506. 

Step S503: The main controller 110 further 
20 analyzes the image file written in the memory 104, and 
determines whether authentication data is added to the 
image file. If authentication data is added, the flow 
advances to step S504; if not, the flow advances to 
step S505. 

25 Step S504: The main controller 110 reads out 

reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
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in area 0. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area 0 is protected and has authentication data, the 
main controller 110 displays mark 2 shown in Fig. 7C in 
area X shown in Fig. 7A. 

Step S505: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area 0. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area 0 is protected but has no authentication data, 
the main controller 110 displays mark 3 shown in 
Fig. 7D in area X shown in Fig. 7A. 

Step S506: The main controller 110 further 
analyzes the image file written in the memory 104, and 
determines whether authentication data is added to the 
image file. If authentication data is added, the flow 
advances to step S507; if not, the flow advances to 
step S508. 

Step S507: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area 0. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area 0 has authentication data but is not protected, 
the main controller 110 displays mark 4 shown in 
Fig. 7E in area X shown in Fig. 7A. 
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Step S508: The main controller 110 reads out 
reduced Image data from the Image file written in the 
memory 104, and displays the readout reduced image data 
in area 0. Also, to notify the user that the image 
5 file corresponding to the reduced image data displayed 
in area 0 has no authentication data and is not 
protected, the main controller 110 displays nothing in 
area X shown in Fig. 7A. 

Fig. 6 is a flow chart showing a processing 
10 sequence executed when the image display mode is 
switched from the one -image display mode to the 
nine-image display mode. 

Step S601: The main controller 110 sets n = 0. 
Step S602: The memory interface 105 reads out an 
15 image file corresponding to reduced image data to be 

displayed in area n from the removable memory 106, and 
writes the readout image file in the memory 104. 

Step S603: The main controller 110 determines 
whether area n is the selection area. If area n is the 
20 selection area, the flow advances to step S604; if not, 
the flow advances to step S613. 

Step S604: The main controller 110 analyzes the 
image file written in the memory 104, and determines 
whether the image file is protected. If the image file 
25 is protected, the flow advances to step S605; if not, 
the flow advances to step S608. 

Step S605: The main controller 110 further 
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analyzes the image file written in the memory 104, and 
determines whether authentication data is added to the 
image file. If authentication data is added, the flow 
advances to step S606; if not, the flow advances to 
step S607. 

Step S606: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n is protected and has authentication data, the 
main controller 110 displays mark 2 shown in Fig. 7C in 
area X shown in Fig. 7B. 

Step S607: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n is protected but has no authentication data, 
the main controller 110 displays mark 3 shown in 
Fig. 7D in area X shown in Fig. 7B. 

Step S608: The main controller 110 further 
analyzes the image file written in the memory 104, and 
determines whether authentication data is added to the 
image file. If authentication data is added, the flow 
advances to step S609; if not, the flow advances to 
step S610. 
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Step S609: The main controller 110 reads out 
reduced Image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n has authentication data but is not protected, 
the main controller 110 displays mark 4 shown in 
Fig. 7E in area X shown in Fig. 7B. 

Step S610: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. Also, to notify the user that the image 
file corresponding to the reduced image data displayed 
in area n has no authentication data and is not 
protected, the main controller 110 displays nothing in 
area X shown in Fig. 7B. 

Step S611: The main controller 110 determines 
whether n = 8. If n 8, the flow advances to step 
S612. 

Step S612: The main controller 110 sets n = n + 

1. 

Step S613: The main controller 110 reads out 
reduced image data from the image file written in the 
memory 104, and displays the readout reduced image data 
in area n. 

As described above, the image sensing apparatus 
10 according to the second embodiment can display mark 
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2 , 3 , or 4 and hence can notify the user whether an 
Image file has authentication data and is protected. 

Also, the image sensing apparatus 10 according to 
the second embodiment can display mark 2, 3, or 4 in 
5 the scime place (area X). Therefore, a limited display 
area can be effectively used. 

Furthermore, the image sensing apparatus 10 
according to the second embodiment can display mark 1, 
2, or 3 in the same place (area X) even when the image 
10 display modes are switched. Therefore, the user can 

recognize only by checking area X whether an image file 
has authentication data and is protected. 

In the first and second embodiments as described 
above, it is possible to notify a user whether an image 
15 file has authentication data. 
< Third Embodiment > 

The third embodiment of the present invention 
will be described below with reference to Figs. 9 to 11. 
Fig. 9 is a block diagreon showing the main 
20 constituent elements of an image sensing apparatus 1010 
according to the third embodiment. The image sensing 
apparatus 1010 is an apparatus (e.g., a digital camera, 
a scanner, a copying machine, or a portable apparatus 
with a digital camera) having a function of sensing a 
25 digital image by using an image sensor. As in the 
first and second embodiments, the image sensing 
apparatus 1010 is a digital camera. 
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An image sensing unit 1101 senses a digital image 
by using an image sensor. An image processor 1102 
converts the size of the digital image obtained from 
the image sensing unit 1101 into a predetermined size, 
and develops this digital image converted into the 
predetermined size. In this embodiment, "development" 
is to adjust at least one of the white balance, 
brightness, hue, saturation, color space, and the like 
of the digital image in accordance with preset image 
adjusting conditions. 

When an image recording mode is a JPEG mode, the 
image processor 1102 converts the developed digital 
image into a JPEG image having predetermined image 
quality (fine or normal). In addition, the image 
processor 1102 generates a reduced image and thumbnail 
image from the developed digital image, and writes the 
JPEG image, reduced image, and thumbnail image in an 
internal memory 1103. In this embodiment, a digital 
image compressed in accordance with a lossy compression 
scheme such as a JPEG scheme (ISO/IEC 10918-1) will be 
called a JPEG image, and an image recording mode in 
which a digital image is saved as it is converted into 
a JPEG image will be called a JPEG mode. Also, in this 
embodiment , an image obtained by reducing a developed 
digital image to a size matching the screen size of a 
display unit 1105 will be called a reduced image. 

When the image recording mode is a RAW mode, the 
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image processor 1102 converts the developed digital 
image into a RAW image, generates a reduced image and 
thumbnail image from the developed digital image, and 
writes the RAW image, reduced image, and thumbnail 
image in the internal memory 1103. In this embodiment, 
a digital image compressed in accordance with a 
lossless compression scheme will be called a RAW image, 
and an image recording mode in which a digital image is 
converted into a RAW image will be called a RAW mode. 

If an authentication data addition mode is ON, a 
display controller 1104 automatically displays the 
reduced image (obtained by reducing the sensed digital 
image) obtained from the internal memory 1103 on the 
display unit 1105, and also automatically displays an 
addition mark on the display unit 1105. If the 
authentication data addition mode is OFF, the display 
controller 1104 automatically displays the reduced 
image obtained from the internal memory 1103 on the 
display unit 1105, but displays no addition mark. In 
this embodiment, a mode in which authentication data is 
added to a sensed digital image will be called an 
authentication data addition mode, and information 
indicating that authentication data is added to a 
sensed digital image will be called an addition mark. 

A memory interface 1106 saves an image file 
obtained from the internal memory 1103 in a memory card 
1107. The memory card 1107 is a removable storage 
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medium having a capacity for storing a plurality of 
image files. 

A main controller 1108 controls various functions 
of the image sensing apparatus 1010. The main 
controller 1108 has a microcomputer and a memory 
storing programs executable by the microcomputer. An 
operation unit 1109 has operating means such as 
switches, buttons, and dials for operating the image 
sensing apparatus 1010. Switching between the image 
recording modes, ON/OFF of the authentication data 
addition mode, and the like can be set by using the 
operation unit 109. Also, the image adjusting 
conditions for adjusting at least one of the white 
balance, brightness, hue, saturation, color space, size, 
image quality, and the like of a sensed image can be 
set by using the operation unit 1109. 

If the image recording mode is the JPEG mode, an 
arithmetic unit 1110 generates authentication data from 
a JPEG image obtained from the internal memory 1103. 
Authentication data of a JPEG image is generated by 
performing encryption (or an arithmetic operation 
equivalent to encryption) on a hash value (or data 
equivalent to a hash value) calculated from the JPEG 
image by using a secret key of a secret key 
cryptographic system (also called a symmetric key 
cryptographic system). However, authentication data 
can also be generated by some other methods . For 
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example. It is of course possible to generate 
authentication data by performing encryption (or an 
arithmetic operation equivalent to encryption) on a 
hash value (or data equivalent to a hash value) 
5 calculated from a JPEG image by using a private key of 
a public key cryptographic system (also called an 
asymmetric key cryptographic system) . 

If the image recording mode is the RAW mode, the 
arithmetic unit 1110 generates authentication data from 

10 a RAW image obtained from the internal memory 1103. 
Authentication data of a RAW image is generated by 
performing encryption (or an arithmetic operation 
equivalent to encryption) on a hash value (or data 
equivalent to a hash value) calculated from the RAW 

15 image by using a secret key of a secret key 

cryptographic system (also called a symmetric key 
cryptographic system). However, authentication data 
can also be generated by some other methods. For 
example, it is of course possible to generate 

20 authentication data by performing encryption (or an 
arithmetic operation equivalent to encryption) on a 
hash value (or data equivalent to a hash value) 
calculated from a RAW image by using a private key of a 
public key cryptographic system (also called an 

25 asymmetric key cryptographic system) . Note that the 
format of image data when the image data is stored in 
the memory card 1107 is the same as shown in Fig. 8. 
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Figs. 10 and 11 are flow charts showing 
processing sequences performed by the image sensing 
apparatus 1010 according to the third embodiment. 

Step S1201: A digital image is sensed in 
accordance with instructions from the user. 

Step S1202: An image recording mode is determined. 
If the image recording mode is the JPEG mode, the flow 
advances to step S1203. If the image recording mode is 
the RAW mode, the flow advances to step S1301. 

Step S1203: The image processor 1102 converts the 
size of the digital image obtained from the image 
sensing unit 1101 into a predetermined size, and 
develops this digital image converted into the 
predetermined size. 

Step S1204: The image processor 1102 converts the 
developed digital image into a JPEG image having 
predetermined image quality (fine or normal). In 
addition, the image processor 1102 generates a reduced 
image and thumbnail image from the developed sensed 
image, and writes the JPEG image, reduced image, and 
thumbnail image in the internal memory 1103. 

Step S1205: The main controller 1108 determines 
whether the authentication data addition mode is ON. 
If the authentication data addition mode is ON, the 
flow advances to steps S1206 and S1207; if not, the 
flow advances to step S1210. 

Step S1206: Processing in step S1206 is executed 
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in parallel with processing in step S1207, and is 
started before the processing in step S1207 is 
completed. The display controller 1104 automatically 
displays the reduced image obtained from the internal 
memory 1103 on the display unit 1105, and also 
automatically displays the addition mark (representing 
that authentication data is added to a sensed digital 
image) on the display unit 1105. 

Step S1207: The arithmetic unit 1110 generates, 
from the JPEG image obtained from the internal memory 
1103, authentication data (necessary to authenticate 
that the JPEG image is not altered) of the JPEG image, 
and writes the generated authentication data in the 
internal memory 1103. 

Step S1208: The main controller 1108 generates a 
JPEG image file including the JPEG image, reduced image, 
thumbnail image, authentication data, and the like, and 
writes the generated JPEG image file in the internal 
memory 1103. 

Step S1209: The memory interface 1106 saves the 
JPEG image file obtained from the internal memory 1103 
in the memory card 1107. 

Step S1210: The display controller 1104 
automatically displays the reduced image obtained from 
the internal memory 1103 on the display unit 1105, but 
displays no addition mark (representing that 
authentication data is added to a sensed digital image) 
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on the display unit 1105. Since no addition mark is 
displayed on the display unit 1105, the user can 
recognize that the sensed digital image has no 
authentication data. 

Step S1211: The main controller 1108 generates a 
JPEG image file (including no authentication data) 
including the JPEG image, reduced image, thumbnail 
image, and the like, and writes the generated JPEG 
image file in the internal memory 1103. 

Step S1212: The memory interface 1106 saves the 
JPEG image file obtained from the internal memory 1103 
in the memory card 1107. 

Step S1301: The image processor 1102 converts the 
digital image obtained from the image sensing unit 1101 
into a RAW image. In addition, the image processor 
1102 generates a reduced image and thumbnail image from 
the digital image obtained from the image sensing unit 
1101, and writes the RAW image, reduced image, and 
thumbnail image in the internal memory 1103. 

Step S1302: The main controller 1108 determines 
whether the authentication data addition mode is ON. 
If the authentication data addition mode is ON, the 
flow advances to steps S1303 and S1304; if not, the 
flow advances to step S1307. 

Step S1303: Processing in step S1303 is executed 
in parallel with processing in step S1304, and is 
started before the processing in step S1304 is 
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completed. The display controller 1104 automatically 
displays the reduced image obtained from the internal 
memory 1103 on the display unit 1105, and also 
automatically displays the addition mark (representing 
that authentication data is added to a sensed digital 
image) on the display unit 1105. 

Step S1304: The arithmetic unit 1110 generates, 
from the RAW image obtained from the internal memory 
1103, authentication data (necessary to authenticate 
that the RAW image is not altered) of the RAW image, 
and writes the generated authentication data in the 
internal memory 1103. 

Step S1305: The main controller 1108 generates a 
RAW image file including the RAW image, reduced image, 
thumbnail image, authentication data, and the like, and 
writes the generated RAW image file in the internal 
memory 1103. 

Step S1306: The memory interface 1106 saves the 
RAW image file obtained from the internal memory 1103 
in the memory card 1107. 

Step S1307: The display controller 1104 
automatically displays the reduced image obtained from 
the internal memory 1103 on the display unit 1105, but 
displays no addition mark (representing that 
authentication data is added to a sensed digital image) 
on the display unit 1105. Since no addition mark is 
displayed on the display unit 1105, the user can 
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recognize that the sensed digital image has no 
authentication data . 

Step S1308: The main controller 1108 generates a 
RAW image file (including no authentication data) 
including the RAW image, reduced image, thumbnail image, 
and the like, and writes the generated RAW image file 
in the internal memory 1103. 

Step S1309: The memory interface 1106 saves the 
RAW image file obtained from the internal memory 1103 
in the memory card 1107. 

In the image sensing apparatus 1010 according to 
this embodiment as described above, when a reduced 
image of a sensed digital image is displayed on the 
display unit 1105, information (addition mark) 
representing that authentication data is added to the 
digital image can be displayed on the display unit 1105. 
When a user checks the sensed digital image, this 
function allows the user to determine whether the 
sensed digital image has authentication data. 

Also, in the image sensing apparatus 1010 
according to this embodiment, the process of generating 
authentication data of a sensed digital image and the 
process of automatically displaying, on the display 
unit 1105, information representing that the sensed 
digital image has the authentication data can be 
performed in parallel. With this function, the image 
sensing apparatus can notify the user of the 
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information representing that a sensed digital image 
has authentication data. 

In the third embodiment as described above, when 
a user checks a sensed digital image, he or she can 
determine whether the sensed digital image has 
authentication data . 

In the above third embodiment , if the 
authentication data addition mode is ON when an image 
is sensed, a reduced image and a mark indicating that 
authentication data is added to the sensed image are 
displayed. However, check by this mark may also be 
performed when an image sensed in the past is displayed 
for confirmation on the display unit 1105. That is, 
the third embodiment may also be a combination of the 
first and second embodiments described previously. 
(Other Embodiment) 

The present invention is not limited to the above 
embodiments, but can be practiced in various forms. 
For example, the present invention can be practiced in 
a form in which the JPEG scheme is replaced with 
another lossy compression scheme other than the JPEG 
scheme . 

The object of the present invention can also be 
achieved by supplying a storage medium storing the 
program code of software for implementing the functions 
of the above embodiments to a system or apparatus, and 
reading out and executing the program code stored in 
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the Storage medium by a computer (or a CPU or MPU) of 
the system or apparatus. 

In this case, the progreun code read out from the 
storage medium Implements the functions of the present 
5 Invention, and the program code Itself and the storage 
medium storing this program code constitute the 
Invention. 

, As this storage medium for supplying the program 
code. It Is possible to use, e.g., a flexible disk, 

10 hard disk, optical disk, magnetooptlcal disk, CD-ROM, 
CD-R, magnetic tape, nonvolatile memory card, and ROM. 

Furthermore, besides the functions of the above 
embodiments are Implemented by executing the readout 
program code by the computer, the present Invention 

15 Includes a case where an OS (basic system or Operating 
System) or the like running on the computer performs 
part or the whole of actual processing In accordance 
with Instructions by the program code and thereby 
Implements the functions of the embodiments. 

20 Furthermore, the present Invention also Includes 

a case where the program code read out from the storage 
medium Is written In a memory of a function expansion 
board Inserted Into the computer or of a function 
expansion unit connected to the computer, and. In 

25 accordance with Instructions by the program code, a CPU 
or the like of the function expansion board or function 
expansion unit performs part or the whole of actual 
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processing and thereby Implements the functions of the 
above embodiments . 

The present Invention Is not limited to the above 
embodiments and various changes and modifications can 
5 be made within the spirit and scope of the present 
Invention. Therefore, to apprise the public of the 
scope of the present Invention, the following claims 
are made. 
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